2.61. test_ipsec_tun_if_esp module

class test_ipsec_tun_if_esp.TemplateIpsec4TunIfEsp(methodName='runTest')

Bases: template_ipsec.TemplateIpsec

IPsec tunnel interface tests

encryption_type
setUp()

Clear trace before running each test

classmethod setUpClass()

Perform class setup before running the testcase Remove shared memory files, start vpp and connect the vpp-api

tearDown()

Show various debug prints after each test

classmethod tearDownClass()

Perform final cleanup after running all tests in this test-case

class test_ipsec_tun_if_esp.TemplateIpsec4TunIfEspUdp(methodName='runTest')

Bases: template_ipsec.TemplateIpsec

IPsec UDP tunnel interface tests

config_network()
encryption_type
setUp()

Clear trace before running each test

classmethod setUpClass()

Perform class setup before running the testcase Remove shared memory files, start vpp and connect the vpp-api

tearDown()

Show various debug prints after each test

classmethod tearDownClass()

Perform final cleanup after running all tests in this test-case

tun4_decrypt_node_name = 'esp4-decrypt-tun'
tun4_encrypt_node_name = 'esp4-encrypt-tun'
verify_encrypted(p, sa, rxs)
class test_ipsec_tun_if_esp.TemplateIpsec4TunProtect

Bases: object

IPsec IPv4 Tunnel protect

config_network(p)
config_protect(p)
config_sa_tra(p)
config_sa_tun(p)
encryption_type
tun4_decrypt_node_name = 'esp4-decrypt-tun'
tun4_encrypt_node_name = 'esp4-encrypt-tun'
tun4_input_node = 'ipsec4-tun-input'
unconfig_network(p)
unconfig_protect(p)
unconfig_sa(p)
class test_ipsec_tun_if_esp.TemplateIpsec6TunIfEsp(methodName='runTest')

Bases: template_ipsec.TemplateIpsec

IPsec tunnel interface tests

encryption_type
setUp()

Clear trace before running each test

tearDown()

Show various debug prints after each test

class test_ipsec_tun_if_esp.TemplateIpsec6TunProtect

Bases: object

IPsec IPv6 Tunnel protect

config_network(p)
config_protect(p)
config_sa_tra(p)
config_sa_tun(p)
unconfig_network(p)
unconfig_protect(p)
unconfig_sa(p)
class test_ipsec_tun_if_esp.TestIpsec4MultiTunIfEsp(methodName='runTest')

Bases: template_ipsec.TemplateIpsec, template_ipsec.IpsecTun4

IPsec IPv4 Multi Tunnel interface

encryption_type
setUp()

Clear trace before running each test

tearDown()

Show various debug prints after each test

test_tun_44()

Multiple IPSEC tunnel interfaces

test_tun_rr_44()

Round-robin packets acrros multiple interface

tun4_decrypt_node_name = 'esp4-decrypt-tun'
tun4_encrypt_node_name = 'esp4-encrypt-tun'
class test_ipsec_tun_if_esp.TestIpsec4TunIfEsp1(methodName='runTest')

Bases: test_ipsec_tun_if_esp.TemplateIpsec4TunIfEsp, template_ipsec.IpsecTun4Tests

Ipsec ESP - TUN tests

test_tun_basic64()

ipsec 6o4 tunnel basic test

test_tun_basic_frag44()

ipsec 4o4 tunnel frag basic test

test_tun_burst64()

ipsec 6o4 tunnel basic test

tun4_decrypt_node_name = 'esp4-decrypt-tun'
tun4_encrypt_node_name = 'esp4-encrypt-tun'
class test_ipsec_tun_if_esp.TestIpsec4TunIfEsp2(methodName='runTest')

Bases: test_ipsec_tun_if_esp.TemplateIpsec4TunIfEsp, template_ipsec.IpsecTcpTests

Ipsec ESP - TCP tests

class test_ipsec_tun_if_esp.TestIpsec4TunIfEspAll(methodName='runTest')

Bases: template_ipsec.TemplateIpsec, template_ipsec.IpsecTun4

IPsec IPv4 Tunnel interface all Algos

config_network(p)
encryption_type
rekey(p)
setUp()

Clear trace before running each test

tearDown()

Show various debug prints after each test

test_tun_44()

IPSEC tunnel all algos

tun4_decrypt_node_name = 'esp4-decrypt-tun'
tun4_encrypt_node_name = 'esp4-encrypt-tun'
unconfig_network(p)
class test_ipsec_tun_if_esp.TestIpsec4TunIfEspHandoff(methodName='runTest')

Bases: test_ipsec_tun_if_esp.TemplateIpsec4TunIfEsp, template_ipsec.IpsecTun4HandoffTests

Ipsec ESP 4 Handoff tests

tun4_decrypt_node_name = 'esp4-decrypt-tun'
tun4_encrypt_node_name = 'esp4-encrypt-tun'
class test_ipsec_tun_if_esp.TestIpsec4TunIfEspNoAlgo(methodName='runTest')

Bases: template_ipsec.TemplateIpsec, template_ipsec.IpsecTun4

IPsec IPv4 Tunnel interface no Algos

config_network(p)
encryption_type
setUp()

Clear trace before running each test

tearDown()

Show various debug prints after each test

test_tun_44()

IPSec SA with NULL algos

tun4_decrypt_node_name = 'esp4-decrypt-tun'
tun4_encrypt_node_name = 'esp4-encrypt-tun'
unconfig_network(p)
class test_ipsec_tun_if_esp.TestIpsec4TunIfEspUdp(methodName='runTest')

Bases: test_ipsec_tun_if_esp.TemplateIpsec4TunIfEspUdp, template_ipsec.IpsecTun4Tests

Ipsec ESP UDP tests

setUp()

Clear trace before running each test

test_keepalive()

IPSEC NAT Keepalive

tun4_input_node = 'ipsec4-tun-input'
class test_ipsec_tun_if_esp.TestIpsec4TunIfEspUdpGCM(methodName='runTest')

Bases: test_ipsec_tun_if_esp.TemplateIpsec4TunIfEspUdp, template_ipsec.IpsecTun4Tests

Ipsec ESP UDP GCM tests

setUp()

Clear trace before running each test

tun4_input_node = 'ipsec4-tun-input'
class test_ipsec_tun_if_esp.TestIpsec4TunProtect(methodName='runTest')

Bases: template_ipsec.TemplateIpsec, test_ipsec_tun_if_esp.TemplateIpsec4TunProtect, template_ipsec.IpsecTun4

IPsec IPv4 Tunnel protect - transport mode

setUp()

Clear trace before running each test

tearDown()

Show various debug prints after each test

test_tun_44()

IPSEC tunnel protect

class test_ipsec_tun_if_esp.TestIpsec4TunProtectTun(methodName='runTest')

Bases: template_ipsec.TemplateIpsec, test_ipsec_tun_if_esp.TemplateIpsec4TunProtect, template_ipsec.IpsecTun4

IPsec IPv4 Tunnel protect - tunnel mode

encryption_type
gen_encrypt_pkts(p, sa, sw_intf, src, dst, count=1, payload_size=100)
gen_pkts(sw_intf, src, dst, count=1, payload_size=100)
setUp()

Clear trace before running each test

tearDown()

Show various debug prints after each test

test_tun_44()

IPSEC tunnel protect

tun4_decrypt_node_name = 'esp4-decrypt-tun'
tun4_encrypt_node_name = 'esp4-encrypt-tun'
verify_decrypted(p, rxs)
verify_encrypted(p, sa, rxs)
class test_ipsec_tun_if_esp.TestIpsec4TunProtectTunDrop(methodName='runTest')

Bases: template_ipsec.TemplateIpsec, test_ipsec_tun_if_esp.TemplateIpsec4TunProtect, template_ipsec.IpsecTun4

IPsec IPv4 Tunnel protect - tunnel mode - drop

encryption_type
gen_encrypt_pkts(p, sa, sw_intf, src, dst, count=1, payload_size=100)
setUp()

Clear trace before running each test

tearDown()

Show various debug prints after each test

test_tun_drop_44()

IPSEC tunnel protect bogus tunnel header

tun4_decrypt_node_name = 'esp4-decrypt-tun'
tun4_encrypt_node_name = 'esp4-encrypt-tun'
class test_ipsec_tun_if_esp.TestIpsec4TunProtectUdp(methodName='runTest')

Bases: template_ipsec.TemplateIpsec, test_ipsec_tun_if_esp.TemplateIpsec4TunProtect, template_ipsec.IpsecTun4

IPsec IPv4 Tunnel protect - transport mode

setUp()

Clear trace before running each test

tearDown()

Show various debug prints after each test

test_keepalive()

IPSEC NAT Keepalive

test_tun_44()

IPSEC UDP tunnel protect

verify_encrypted(p, sa, rxs)
class test_ipsec_tun_if_esp.TestIpsec6MultiTunIfEsp(methodName='runTest')

Bases: template_ipsec.TemplateIpsec, template_ipsec.IpsecTun6

IPsec IPv6 Multi Tunnel interface

encryption_type
setUp()

Clear trace before running each test

tearDown()

Show various debug prints after each test

test_tun_66()

Multiple IPSEC tunnel interfaces

tun6_decrypt_node_name = 'esp6-decrypt-tun'
tun6_encrypt_node_name = 'esp6-encrypt-tun'
class test_ipsec_tun_if_esp.TestIpsec6TunIfEsp1(methodName='runTest')

Bases: test_ipsec_tun_if_esp.TemplateIpsec6TunIfEsp, template_ipsec.IpsecTun6Tests

Ipsec ESP - TUN tests

test_tun_basic46()

ipsec 4o6 tunnel basic test

test_tun_burst46()

ipsec 4o6 tunnel burst test

tun6_decrypt_node_name = 'esp6-decrypt-tun'
tun6_encrypt_node_name = 'esp6-encrypt-tun'
class test_ipsec_tun_if_esp.TestIpsec6TunIfEspHandoff(methodName='runTest')

Bases: test_ipsec_tun_if_esp.TemplateIpsec6TunIfEsp, template_ipsec.IpsecTun6HandoffTests

Ipsec ESP 6 Handoff tests

tun6_decrypt_node_name = 'esp6-decrypt-tun'
tun6_encrypt_node_name = 'esp6-encrypt-tun'
class test_ipsec_tun_if_esp.TestIpsec6TunProtect(methodName='runTest')

Bases: template_ipsec.TemplateIpsec, test_ipsec_tun_if_esp.TemplateIpsec6TunProtect, template_ipsec.IpsecTun6

IPsec IPv6 Tunnel protect - transport mode

encryption_type
setUp()

Clear trace before running each test

tearDown()

Show various debug prints after each test

test_tun_46()

IPSEC tunnel protect 4o6

test_tun_66()

IPSEC tunnel protect 6o6

tun6_decrypt_node_name = 'esp6-decrypt-tun'
tun6_encrypt_node_name = 'esp6-encrypt-tun'
class test_ipsec_tun_if_esp.TestIpsec6TunProtectTun(methodName='runTest')

Bases: template_ipsec.TemplateIpsec, test_ipsec_tun_if_esp.TemplateIpsec6TunProtect, template_ipsec.IpsecTun6

IPsec IPv6 Tunnel protect - tunnel mode

encryption_type
gen_encrypt_pkts6(p, sa, sw_intf, src, dst, count=1, payload_size=100)
gen_pkts6(sw_intf, src, dst, count=1, payload_size=100)
setUp()

Clear trace before running each test

tearDown()

Show various debug prints after each test

test_tun_66()

IPSEC tunnel protect

tun6_decrypt_node_name = 'esp6-decrypt-tun'
tun6_encrypt_node_name = 'esp6-encrypt-tun'
verify_decrypted6(p, rxs)
verify_encrypted6(p, sa, rxs)
class test_ipsec_tun_if_esp.TestIpsec6TunProtectTunDrop(methodName='runTest')

Bases: template_ipsec.TemplateIpsec, test_ipsec_tun_if_esp.TemplateIpsec6TunProtect, template_ipsec.IpsecTun6

IPsec IPv6 Tunnel protect - tunnel mode - drop

encryption_type
gen_encrypt_pkts6(p, sa, sw_intf, src, dst, count=1, payload_size=100)
setUp()

Clear trace before running each test

tearDown()

Show various debug prints after each test

test_tun_drop_66()

IPSEC 6 tunnel protect bogus tunnel header

tun6_decrypt_node_name = 'esp6-decrypt-tun'
tun6_encrypt_node_name = 'esp6-encrypt-tun'
class test_ipsec_tun_if_esp.TestIpsecGre6IfEspTra(methodName='runTest')

Bases: template_ipsec.TemplateIpsec, template_ipsec.IpsecTun6Tests

Ipsec GRE ESP - TRA tests

encryption_type
gen_encrypt_pkts6(p, sa, sw_intf, src, dst, count=1, payload_size=100)
gen_pkts6(sw_intf, src, dst, count=1, payload_size=100)
setUp()

Clear trace before running each test

tearDown()

Show various debug prints after each test

tun6_decrypt_node_name = 'esp6-decrypt-tun'
tun6_encrypt_node_name = 'esp6-encrypt-tun'
verify_decrypted6(p, rxs)
verify_encrypted6(p, sa, rxs)
class test_ipsec_tun_if_esp.TestIpsecGreIfEsp(methodName='runTest')

Bases: template_ipsec.TemplateIpsec, template_ipsec.IpsecTun4Tests

Ipsec GRE ESP - TUN tests

encryption_type
gen_encrypt_pkts(p, sa, sw_intf, src, dst, count=1, payload_size=100)
gen_pkts(sw_intf, src, dst, count=1, payload_size=100)
setUp()

Clear trace before running each test

tearDown()

Show various debug prints after each test

tun4_decrypt_node_name = 'esp4-decrypt-tun'
tun4_encrypt_node_name = 'esp4-encrypt-tun'
verify_decrypted(p, rxs)
verify_encrypted(p, sa, rxs)
class test_ipsec_tun_if_esp.TestIpsecGreIfEspTra(methodName='runTest')

Bases: template_ipsec.TemplateIpsec, template_ipsec.IpsecTun4Tests

Ipsec GRE ESP - TRA tests

encryption_type
gen_encrypt_non_ip_pkts(sa, sw_intf, src, dst, count=1, payload_size=100)
gen_encrypt_pkts(p, sa, sw_intf, src, dst, count=1, payload_size=100)
gen_pkts(sw_intf, src, dst, count=1, payload_size=100)
setUp()

Clear trace before running each test

tearDown()

Show various debug prints after each test

test_gre_non_ip()
tun4_decrypt_node_name = 'esp4-decrypt-tun'
tun4_encrypt_node_name = 'esp4-encrypt-tun'
verify_decrypted(p, rxs)
verify_encrypted(p, sa, rxs)
class test_ipsec_tun_if_esp.TestIpsecGreTebIfEsp(methodName='runTest')

Bases: template_ipsec.TemplateIpsec, template_ipsec.IpsecTun4Tests

Ipsec GRE TEB ESP - TUN tests

encryption_type
gen_encrypt_pkts(p, sa, sw_intf, src, dst, count=1, payload_size=100)
gen_pkts(sw_intf, src, dst, count=1, payload_size=100)
omac = '00:11:22:33:44:55'
setUp()

Clear trace before running each test

tearDown()

Show various debug prints after each test

tun4_decrypt_node_name = 'esp4-decrypt-tun'
tun4_encrypt_node_name = 'esp4-encrypt-tun'
verify_decrypted(p, rxs)
verify_encrypted(p, sa, rxs)
class test_ipsec_tun_if_esp.TestIpsecGreTebIfEspTra(methodName='runTest')

Bases: template_ipsec.TemplateIpsec, template_ipsec.IpsecTun4Tests

Ipsec GRE TEB ESP - Tra tests

encryption_type
gen_encrypt_pkts(p, sa, sw_intf, src, dst, count=1, payload_size=100)
gen_pkts(sw_intf, src, dst, count=1, payload_size=100)
omac = '00:11:22:33:44:55'
setUp()

Clear trace before running each test

tearDown()

Show various debug prints after each test

tun4_decrypt_node_name = 'esp4-decrypt-tun'
tun4_encrypt_node_name = 'esp4-encrypt-tun'
verify_decrypted(p, rxs)
verify_encrypted(p, sa, rxs)
class test_ipsec_tun_if_esp.TestIpsecGreTebUdpIfEspTra(methodName='runTest')

Bases: template_ipsec.TemplateIpsec, template_ipsec.IpsecTun4Tests

Ipsec GRE TEB UDP ESP - Tra tests

encryption_type
gen_encrypt_pkts(p, sa, sw_intf, src, dst, count=1, payload_size=100)
gen_pkts(sw_intf, src, dst, count=1, payload_size=100)
omac = '00:11:22:33:44:55'
setUp()

Clear trace before running each test

tearDown()

Show various debug prints after each test

tun4_decrypt_node_name = 'esp4-decrypt-tun'
tun4_encrypt_node_name = 'esp4-encrypt-tun'
verify_decrypted(p, rxs)
verify_encrypted(p, sa, rxs)
class test_ipsec_tun_if_esp.TestIpsecGreTebVlanIfEsp(methodName='runTest')

Bases: template_ipsec.TemplateIpsec, template_ipsec.IpsecTun4Tests

Ipsec GRE TEB ESP - TUN tests

encryption_type
gen_encrypt_pkts(p, sa, sw_intf, src, dst, count=1, payload_size=100)
gen_pkts(sw_intf, src, dst, count=1, payload_size=100)
omac = '00:11:22:33:44:55'
setUp()

Clear trace before running each test

tearDown()

Show various debug prints after each test

tun4_decrypt_node_name = 'esp4-decrypt-tun'
tun4_encrypt_node_name = 'esp4-encrypt-tun'
verify_decrypted(p, rxs)
verify_encrypted(p, sa, rxs)
class test_ipsec_tun_if_esp.TestIpsecMGreIfEspTra4(methodName='runTest')

Bases: template_ipsec.TemplateIpsec, template_ipsec.IpsecTun4

Ipsec mGRE ESP v4 TRA tests

encryption_type
gen_encrypt_pkts(p, sa, sw_intf, src, dst, count=1, payload_size=100)
gen_pkts(sw_intf, src, dst, count=1, payload_size=100)
setUp()

Clear trace before running each test

tearDown()

Show various debug prints after each test

test_tun_44()

mGRE IPSEC 44

tun4_decrypt_node_name = 'esp4-decrypt-tun'
tun4_encrypt_node_name = 'esp4-encrypt-tun'
verify_decrypted(p, rxs)
verify_encrypted(p, sa, rxs)
class test_ipsec_tun_if_esp.TestIpsecMGreIfEspTra6(methodName='runTest')

Bases: template_ipsec.TemplateIpsec, template_ipsec.IpsecTun6

Ipsec mGRE ESP v6 TRA tests

encryption_type
gen_encrypt_pkts6(p, sa, sw_intf, src, dst, count=1, payload_size=100)
gen_pkts6(sw_intf, src, dst, count=1, payload_size=100)
setUp()

Clear trace before running each test

tearDown()

Show various debug prints after each test

test_tun_66()

mGRE IPSec 66

tun6_decrypt_node_name = 'esp6-decrypt-tun'
tun6_encrypt_node_name = 'esp6-encrypt-tun'
verify_decrypted6(p, rxs)
verify_encrypted6(p, sa, rxs)
test_ipsec_tun_if_esp.config_tra_params(p, encryption_type, tun_if)
test_ipsec_tun_if_esp.config_tun_params(p, encryption_type, tun_if)